This Video Can Exploit Your iPhone (CVE-2025-31200 #1)

Are you a security researcher or reverse engineer? For 50% off IDA Products use promo code BILLY50, https://hex-rays.com/pricing * For 30% off IDA Training use promo code BILLY30, https://hex-rays.com/training ** *License discounts are only valid for individuals, not corporations. Cannot be combined with any other promo code or discount. ** Cannot be combined with any other promo code or discount. ///////////////////////////////////// Hey guys, today we're looking at a recent vulnerability patched by Apple in iOS 18.4.1. The bug in CoreAudio - a user-space framework on iOS involved in media decoding - was found to be exploited in the wild against real iPhone users. No information on the exploit or the vulnerability itself has been revealed by Apple. So in this video today, I walkthrough the process of uncovering this bug by patch diffing the old and the new binary files. At my current point in research, I have not fully diagnosed the cause of the memory corruption. Let me know if you'd be interested in a future video investigating this further! Links: Diaphora for IDA Pro - https://plugins.hex-rays.com/joxeanko... Scripts & research notes by zhuowei https://github.com/zhuowei/apple-posi... noahhw4646 Twitter https://x.com/noahhw4646 Thanks for watching ~ bellis1000